Analyst-Operational Risk Management

AMERICAN EXPRESS; Gurugram District; On-site; INR 600,000 - 900,000; Full time

Job summary

AMERICAN EXPRESS is seeking a B30 Analyst in Gurugram to join the Operational Risk Management (ORM) Independent Monitoring Testing team. This role focuses on embedding effective operational risk management in daily operations by collaborating across multiple business units and geographies.

The ideal candidate will hold a relevant degree and have comprehensive skills in project management and risk assessment. Responsibilities include supporting testing programs, monitoring risk trends, and driving operational risk initiatives. Opportunities for professional development are available within a dynamic team.

Qualifications

• 0-3 years of relevant experience in operational risk management.
• Strong understanding of risk management lifecycle and issue management.
• Experience in control testing, risk assessment, and compliance.

Responsibilities

• Support independent testing and monitoring program.
• Develop operational risk coverage universe.
• Monitor operational risk trends across the enterprise.
• Perform Test of Design (ToD) and Test of Effectiveness (ToE).
• Proactively identify high-risk areas requiring intervention.

Skills

Project management

Communication

Analytical skills

Interpersonal skills

Problem-solving

Education

CA/CS/MBA/B.Tech or Masters in Economics/Statistics

Job description

B30 Analyst, Operational Risk Management (ORM) Independent Monitoring Testing

The objective of the Operational Risk Management (ORM) Independent Monitoring Testing team is to strengthen organizational resilience through independent monitoring and testing activities, establish clear standards for reporting and risk assessments, and provide a holistic view of operational risk through aggregated reporting.

Operational Risk Management is seeking an Analyst for the Independent Monitoring Testing team, focused on ensuring effective operational risk management is embedded into day-to-day business operations. This role requires extensive collaboration across multiple business units, functional areas, and geographies.

Qualifications

• CA/CS/MBA/B.Tech or Masters degree in Economics or Statistics, or a related field (preferably from a top‑tier institute) with 0‑3 years of relevant experience.
• Strong understanding of critical operational risk management lifecycle issue management activities.
• Excellent project management, communication, and interpersonal skills.
• Experience in process governance and familiarity with policies, regulatory frameworks, and operational standards.
• Strong analytical and problem‑solving capabilities, including the ability to analyze data, identify trends, and evaluate risk scenarios effectively.
• Experience in control testing, risk assessment, and audit functions.
• Experience working within any Line of Defense (LoD) framework.
• Excellent communication skills and proactiveness.

Preferred Experience

• Prior experience in Operational Risk Management, Internal Audit, Statutory Audit, Risk Management, or First‑ or Second‑Line Risk functions.
• Translating operational risk strategy and appetite into execution guidelines.
• Monitoring and identifying breaches in Key Risk Indicator (KRI) thresholds and risk appetite metrics.
• Supporting implementation of operational risk governance frameworks.
• Developing and communicating operational risk procedures and standards while ensuring adherence.
• Supporting operational risk examination and regulatory management processes.

Responsibilities

• Support the independent testing and monitoring program based on an annual risk‑assessed plan and established testing methodologies.
• Develop a comprehensive operational risk coverage universe that supports a risk‑based annual plan.
• Independently monitor operational risk trends and activities across the enterprise.
• Support and execute an effective challenge process based on defined criteria and integrated into the annual plan.
• Perform Test of Design (ToD) and Test of Effectiveness (ToE) activities and maintain associated control testing documentation.
• Demonstrate strong knowledge of policies and guidelines related to RCSA, PRCA, Enterprise Risk Management, internal control frameworks, and risk parameters.
• Possess an understanding of the Issue Management lifecycle, including issue identification, remediation, validation, and closure processes.
• Manage independent Second Line of Defense (2LoD) testing activities, including integration of methodologies and test plans to address interconnected risks.
• Coordinate a holistic and de‑duplicated independent risk assessment process.
• Proactively identify high‑risk areas requiring intervention or escalation.
• Support cross‑functional Communities of Practice (CoPs) by sharing best practices and helping pioneer new methodologies.
• Drive reporting related to operational risk topics for the Enterprise Risk Management Committee, Board of Directors, and Senior Management, while providing support and oversight for associated initiatives.
• Act as a key contributor in sharing insights, themes, and best practices across the enterprise in a proactive manner.